site-onboarding

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md onboarding workflow explicitly calls wordpress_get_site_context, wordpress_list_pages, wordpress_list_plugins, and other MCP APIs to fetch a connected WordPress site's content and plugin/page data — arbitrary third-party/user-generated content that the agent reads and uses to determine capabilities and next actions, which could enable indirect prompt injection.